jenkinsci/deadmanssnitch-plugin · Security
Jenkins Dead Man's Snitch Plugin vulnerability does not mask tokens
- GHSA ID
- GHSA-m248-72rh-cpx4
- CVE ID
- CVE-2025-53667
- Severity
- medium
- Published
- Updated
- CVSS
- 4.3 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS v3
- 4.3 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CWEs
- CWE-522 · Insufficiently Protected Credentials